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(57) Abstract 

A system for distributing copies of computer sof- 
tware provides inherent protection against unauthorized 
copy of the software. The software distribution system 
includes three computers: a host (10), a software protec- 
tion computer (12) and an end-user computer (14). The 
host computer (10) is under the control of the vendor, 
and the software protection computer (12) and the end- 
user computer (14) are located at the customer installa- 
tion. The software is encrypted in the host computer (10) 
and then transferred to and stored in the end-user com- 
puter (14) after it is registered in the software protection 
computer (12). The transferred software is encrypted us- 
ing a unique encryption key. Each copy of a software 
package generated by the host computer (10) is a unique 
encrypted version of that software package. When this 
unique encrypted version of the'software package is run 
on the end user's computer (14) and encounters an en- 
crypted portion of itself, it will suspend normal execu- 
tion and transfer the encrypted portion to the software 
protection computer (12). This computer (12) will then 
decrypt the encrypted portions of the code and return 
the decrypted portion of the code to the end-user com- 
puter (14) where that code is itself executed or allows ex- 
ecution of the program of which it is a part to continue. 
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SOFTWARE DISTRIBUTION SYSTEM 

BACKGROUND OP THE INVENTION 

This invention relates to electronic software 
distribution and more particularly to a software distribution 
system in which the distributed software is protected against 
copying. 

Over the past few years, the- growth of the software 
industry has been enormous, and as more and more people purchase 
personal computers, the industry is expected to continue to grow 
rapidly. For the most part, purchased software changes hands 
from a mail order or retail vendor to a customer in some physical 
form such as a tape, disk or even a printed listing of code. 
Such physical distribution has resulted in a number of problems 
with respect to both the mode of distribution and customer 
servicing as well as with the rights of the creators and 
publishers of the software which is sold. Principal among the 
problems is that a large percentage of the software which is sold 
ends up being illegally copied. Frequently, a purchaser of 
software will "lend" his copy of the software to a friend who 
makes a copy for himself. The most obvious result of this 
unauthorized copying is that the profits of the creator and 
publisher of the software (who probably have a copyright in the 
software) are greatly reduced. To make up for these lost 
profits, the price of the software is maintained at a high level. 
This sustained high price unfortunately produces an even greater 
incentive to illegally copy. 

Copyright protection, which does provide the creator 
and publisher of software with legal recourse against the person 
making the unauthorized copies has, in fact, afforded little or 
no relief from the problem of copied software. As the copies are 
often made by individuals for their own use, large-scale policing 
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of such copying is virtually impossible. On rare occasions, a 
copier having a large copy resale operation can be caught, but by 
the time he is caught, many unprotected copies usually already 
have been distributed. Furthermore, the advent of software 
rental shops has further limited the copyright owner's ability to 
protect his rights in the software he cwns. 

Another problem frequently encountered with software 
sold over the counter is the need to later distribute revised 
copies to add new features or to fix errors or "bugs" present in 
the software. These bugs appear despite rather substantial 
testing that is performed before a software package is put on the 
market. These bugs are particularly prevalent in software which 
has recently entered the market. In order to correct any errors 
which do appear in the software, a software publisher must recall 
the disk or tape which contains the faulty software. The problem 
with correcting errors in this manner is that the software is cut 
of the hands of the purchaser for a number of days, if not weeks, 
while the exchange and correction take place. Finally, the 
cumbersome nature of this system discourages the user's updating 
of his software which often leaves a bad impression of the 
software publisher's products in the field. 

In order to combat the illegal copying of software, the 
software industry has taken a number of precautions. The various 
approaches fall under* three categories: media protection against 
copying, use of read-only media and processor serialization. 

Media protection against copying. refers to making seme 
unique version of the medium containing the software. One type 
of media protection involves the use of variable-pattern 
diskettes. Variable-pattern diskettes, however, do not offer a 
practical solution to the software copying problem since these 
diskettes depend on a soft format diskette drive and they are 
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vulnerable to memory copy if the entire program is loaded at 
once* Furthermore, such variable-pattern diskettes can only be 
used in a small percentage of the drives currently on the market. 
Therefore, the software distributed on such diskettes can only 
be offered to a rather small percentage of the market. Finally, 
physical alteration of the media, usually by forcing hard errors 
on the media checked for by the software itself, has been used. 
This method fails in that hardware checks in the software can be 
located and neutralized in the software itself. 

Another type of media protection against copying 
involves the use of an operating system override. Such a 
protection scheme depends on a rather unique operating system 
which prevents copying of diskettes. The use of an operating 
system override, however, has not proven to be the answer to the 
problem either since the altered operating system trust be 
tailored to the particular controller chip of the computer on 
which it is operating, and the operating system override cannot 
support use with standard operating systems currently on the 
market. In addition, any operating system override is vulnerable 
to an algorithmic solution or "cracking". One variation on the 
operating system override scheme has the. software employ features 
of the hardware, circumventing the operating system, to check 
areas on the storage media which the operating system cannot 
reach. This method can also be defeated by being neutralized in 
the software itself. 

A thicd type of media protection against copying 
involves the use of segmented programs in conjunction with 
variable-pattern diskettes and/or an operating system override. 
The use of such segmented programs of necessity requires same 
type of a segment loader to read in the various segments when 
required. This results in very slow response from a computer 
utilizing such segmented programs. Furthermore, any loader 
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rcutine for reading in segmented programs is vulnerable to 
algorithmic solution. In addition to the problems stated above, 
these media protection devices have generally been perceived as 
being user-unfriendly, and since it is not possible to make a 
legitimate backup ccpy, such protection schemes are not in wide 
use. 

Another possible solution to the problem of software 
copying involves the use of read-only media to store the 
software. Among the read-only type media which may be used are 
ROMs and laser cards. The problem with the use of such read-only 
media is that any software update can only be done by replacing 
the media itself, and therefore any software update becomes 
rather expensive. Moreover, there is no legitimate backup for 
any media failure since a backup copy cannot be created. 
Finally, with the use of read-only media, added expenses are 
incurred by the user, since a particular type of reader for that 
media must be purchased at great expense to the user (with the 
exception of ROMS) with that user gaining no significant, 
additional value. 

The third type of protection, processor serialization, 
has also not proven to be a very effective means of protecting 
.software. The reason for the ineffectiveness of this mode of 
protection is that processor serialization requires either the 
compliance of all computer manufacturers or publisher-supplied 
hardware which ccmes with the software package to provide the 
serialization. In addition, this protection technique adds no 
value to the computer to compensate for the cost, and there is no 
benefit to the manufacturer for complying with a processor 
serialization scheme. Finally, since serialization involves a 
passive device, it is easy to defeat the serial number check in 
the software itself. 
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In light of the problems encountered with the 



above-described currently existing protection schemes, it appears 
that illegal sales or copying cannot be stopped altogether; it 
can only be made more difficult. The ultimate goal of any 
protection scheme therefore is to make the cost of cracking the 
protection scheme ccmparable to oc preferably greater than the . 
cost of purchasing the software. In order to make cracking costs 
greater than the purchase price of the software, the protection 
scheme must not employ an algorithmic approach which can be 
easily solved. In addition, any add-on hardware must be of a low 
cost nature, and must be compatible with the machines of a 
majority of the major computer manufacturers. 



.protect software from being copied. 

Another object of the present invention is to provide a 
software distribution system in which software is encrypted using 
a virtually indecipherable encrypt ion key. 

Still another object of the present invention is to 
provide a software distribution system in which each copy of the 
distributed software is protected by a unique encryption key. 

Yet another object of the present invention is to 
provide a software distribution system in which each copy of a 
program is organized in a unique pattern to frustate comparison. 

A further object of the present invention is to create 
a software distribution system in which revisions in software can 
be easily distributed. 

SUMMARY OF THE INVENTION 

These and other objects of the invention are achieved 



Therefore, it is a principal object of the present 
invention to provide 'a software distribution system which can 
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by an electronic software distribution system in which 
distributed program copies are uniquely associated with specific 
hardware to which the end user's computer must be connected. A 
central ccnputer facility cperated, for example, by a software 
vendor, contains storage capacity for a library of available 
programs. Auxiliary Software Protection Processors 1 * (SPP) are 
issued to the users* Each SPP is electrically connected to the 
user's computer and electronically interconnected with the 
central facility, for example, via a modem-interfaced phone link- 
Each SPP is equipped with a unique number code referred to as the 
package encryption key (PEK) which is recorded at the central 
facility. The PEK can be factory loaded or down-loaded (via the 
communications link) to the SPP frcm the central facility. The 
software distribution system of the present invention embodies 
two distinct unique operations:* (1) software preparation and 
delivery and (2) software execution in the user's computer. 

In the preparation/delivery phase, when a user orders 
software frcm the central facility, the facility first looks up 
the PEK for that user's SPP and selects an available registration 
index number (RIN) which will be unique foe that user's copy of 
the software package. The central facility then prepares the 
unique user copy of the ordered program by encrypting passages of 
the program selected by the central facility in a manner such 
that a given algorithm operating on a key specified by a 
combination of the PEK and RIN and an encrypted passsage will 
yield the original unencrypted version ("plaintext") of such 
passage. The encrypted version of the ordered program (which is 
encrypted only in a subset of its parts or modules) is then 
transmitted to the user along with a control block containing the 
RIN. The control block is stripped off and the RIN stored in the 
user's SPP while the transmitted program copy (with its encrypted 
passages) is stored in the user's computer system on 
user-selected media. 
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In the software execution phase of operation when the 
^ user desires to run the program, the initial instructions in the 

program check the specific RIN in the SPP associated with that 

* program copy. If the RIN is okay, normal execution proceeds 
until an encrypted passage is encountered* The user's computer 
then executes a call to the SPP in which the encrypted passage is 
decrypted algorithmically in the SPP by use of the key specified 
by the PEK and RIN. The decrypted passage is returned to the 
user's conputer. If the passage is properly decrypted, normal 
program execution resumes until another encrypted passage is 
encountered. In the preferred embodiment, these passages may 
actually be software instructions as well as data. 

Time-limited authorization is implemented by means of a 
real-time clock or counter embedded in the SPP which, for 
example, erases or alters the software-specific RIN after a trial 
period or rental term. Since the unique user copy of the 
selected software cannot run properly unless an SPP with the 
correct PEK and RIN is engaged with the user's computer system, 
the software package would therefore be disabled. 

These and other features and objects of the present 
invention will be more fully understood frcm the following 
detailed description which should be read in light of the 
accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a system block diagram showing the various 
components involved in the transmission of information in the 

* system of the present invention. 

1 Fig. 2 is a block diagram showing the comnunication 

interaction of the various components of the system at the user's 
location. 



CMPI ^ 
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Fig. 3 is a circuit diagram of the software protection 
processor of Fig, 2. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

The software distribution system of the present 
invention provides a means for a vendor to sell software to a 
vendee while providing protection against copying that software. 
As shewn in Fig. 1, the software distribution system of the 
present invention includes three computers - a host computer 
called the Software Encryption Computer (SEC) 10 , a software 
protection computer designated the Software Protection Processor" 
(SPP) 12 and the End-User Computer (EUC) 14. Of these computers, 
the SEC 10 is owned and operated by the vendor while the SPP 12 
and the EUC 14 are owned by the customer and located at a 
customer installation.- The software which is purchased by the 
customer is transmitted from the SEC through a communication 
system such as phone lines, a local area network or a cable 
system. In the preferred embodiment, the software is received by 
the SPP 12 which transfers the software to the EUC 14 for 
storage. When the software is transmitted over phone lines, a 
modem 16 at the vendor installation and a modem 18 at the 
customer installation are required for sending and receiving the 
software. 

The word "encrypt" is used in this application to 
indicate a process of taking original code and disguising it so 
that it is unintelligible. On the other hand, the word "decrypt" 
is used in this application to describe the reverse process, 
namely transforming disguised, unintelligible code back to its 
original form or "plaintext" in the vernacular of cryptography. 

The SEC 10 is a central ccmputer facility located at a 
vendor site or operated under the control of the vendor. The SEC 
10 maintains a library of software available for distribution. 
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Each time a software sale is made, the SEC 12 encrypts the copy 
of the software before transmitting it to the vendee or user. 
Each copy of software is encrypted in a unique fashion. This is 
true even if two copies of the same piece of software are 
transmitted to the same user. 

Once the copy of software has been encrypted in 
preparation for sale, the copy of the software is transmitted by 
the SEC 10 via the vendor modem 16 to the vendee modem 18 which 
is connected to the SPP 12. The SPP 12 is a self-contained 
decryption computer capable of retaining unique control 
information for. each software package purchased by a easterner. 
The SPP 12 has two major functions. The first of these is to 
confirm the customer's validity and to register control 
information 'for any software package sold to that customer. The 
second is to decrypt any enccypted portions of software received 
from the EUC 14 which permits that software program to continue - 
operation in the EUC 14. Hence, unless the SPP 12 is engaged, 
software distributed by the distribution system will not operate 
in the EUC 14. Although the SPP 12 has been described as 
communicating with the SEC 10 through a modem 18, the SPP 12 may 
also contain or interface with corrmunication devices such as a 
local area network or a cable system. The SPP 12 may also be 
contained within the user's EUC 14 as well. 

The third computer in the preferred embodiment of the 
present invention, the EUC 14, is a customer owned or operated 
carputer. This computer may be a heme computer, personal 
computer, snail business computer or a large main frame cenputer. 
All software purchased by a customer is designed for operation on 
his particular EUC 14. 

In operation, before any software may be sold, the 
customer must purchase a modem/SPP unit and its associated 

OM?I__ 
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catraunication software in order to make use of the software 
distribution system of the present invention. Each SPP 12 has 
its own unique Package Encryption Key (PEK). The purchased 
modem/SPP unit is then connected to the customer's EUC 14, and it 
is simply left in place until the customer -wants to purchase 
software. In the preferred embodiment of the system of the 
present invention, the customer wishing to purchase software 
connects his modem/SPP with the system's SEC 10 via telephone. 
The modem/SPP 12 passes its unique identification code 
(prefereably in encrypted focra) to the SEC 10 to confirm the 
identification and the legitimate status of the customer. The 
SEC 10 then generates lists of available software packages along 
with prices and terms of sale. These prices and terms of sale 
(usually credit card authorization) must be agreed upon before a 
transaction actually occurs. Once the customer has met the terms 
of the sale, the SEC 10 creates a unique copy of the specified 
software package, and this package, which also contains encrypted 
security control information, is transmitted through the 
customer's moden^/SPP into his EUC 14. The preparation of the 
unique copy is accomplished by encrypting selected passages of 
the software. First, the SEC looks up the unique PEK for the 
user's SPP. Next, the SEC selects an available Registration 
Index Number (RIN) specific to the user's software copy. 
Passages are encrypted in a manner such that they can be 
decrypted by the SPP using, its PEK modified by the 
package-specific RIN. 

When the EUC 14 begins to receive a unique copy of a 
specific software package, the EUC 14 sends the control 
information block which arrives first to the SPP 12 for 
registration. Included in this control information is the 
encrypted Registration Index Number (RIN) which is decrypted by 
the SPP 12 and stored in its memory. After the control 
information has been decrypted by the SPP 12, the remainder of 
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the transmission, the encrypted software package itself/ is then 
passed through the SPP 12 to the customer's EUC 14 for storage on 
user-selected media. Each time the customer runs software 
purchased frcm the SEC 10, his SPP 12 must also be connected and 
that SPP 12 must be the same SPP 12 which was used when 
purchasing the software initially. If either of these conditions 
is not met, then the software will not operate on the EUC 14 
because the PEK and the RIN for decrypting any particular 
software package are only stored in the SPP 12 which was used for 
purchasing that software. 

The two phases of operation are summarized in the 
following Tables I and II. 

TABLE I ' 

Software Preparation and Delivery Phase 

1. User with modeny'SPP calls SEC. 

2. SEC verifies SPP identification number. 

3. User selects software frcm menu. 

4. SEC looks up PEK for user's SPP. 

5. SEC selects available RIN for user selected 
software. 

6. SEC encrypts selected passages of software 

in a manner such that they can be decrypted by 
SPP by algorithmically combining encrypted 
passage with. key generated by modifying PEK 
with RIN. 
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7. SEC transmits control block with encrypted version 

of RIN, followed by software with encrypted * 
passages. 

8. EUC passes control block to SPP. 

9. SPP decrypts and stores RIN in its memory. 

10. ECJC stores software with encrypted passages 
on disk or other media. 

TABLE II 
Software Execution Phase 

1. EUC loads program off disk or other media. 

2. Initial nodule of software tests decryption 
by sending data to SPP. 

3. SPP looks up corresponding RIN and decrypts data 
with key formed by modifying PEK with that RIN. 

4. Software tests returned data and halts execution 
if data are incorrect. 

5. Normal program execution until encrypted 
passage encountered. 

6. At encrypted passage, software jumps to a 

decryption module which transfers data or 1 
instructions to SPP and gets decrypted data 
or instructions in return. 

7. Resume normal execution until next encrypted 
passage . 

f OMPI \ 
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The Software Protection Processor* (SPP) 12 is the 
heart of the software distribution system of the present 
invention since it is the SPP 12 which provides intelligible code 
to the EUC 14. As shown in Figs. 2 and 3, non-volatile 
read/write memory 22 is provided in the SPP 12 for storing a 
valid software list. This non-volatile read/write memory may be 
inplemented in an electrically erasable programmable read cnly 
memory (EEPROM) so that the list can be updated with each 
purchase. The EEPROM 22 will also include a publicly accessible 
serial number and the PEK. In the preferred embodiment, a 
clock/timer 24 is also included in the SPP 12 to implement 
time-limited authorization so that software can be used on a 
trial or approval basis or rented for a certain predetermined 
allotted time. The clock/timer 24 is provided with a battery 
backup. By using such a clock/timer 24 the current time will be 
updated with every connection to the SEC 10. If there is no 
battery backup and power to the clock/timer 24 is lost, it is 
necessary to reconnect to the SEC 10 before any rented software 
can be tun. In addition to the non-volatile read/write memory 
mentioned above, the SPP 12 will also include a non-volatile 
read-only memory (ROM) 26 for storing the SPP's operating 
program. An illustrative operating program in Z-80 assembly 
language is given in Microfiche Appendix Part I. If it is 
desired to provide for later update of the SPP's operating 
program, however, then an EEPROM can be substituted for the ROM 
26 which contains the operating program. 

The SPP 12 also includes a Z-80 microprocessor 28 which 
controls the functioning of the SPP 12. This microprocessor 28 
will caranunicate with both the SEC 10 through modem 16 and with 
the EUC 14. Appropriate communication interfaces 30, 32 (Fig. 2) 
are provided between the microprocessor 28 and modem 18 and 
between the microprocessor 28 and the EUC 14, respectively. 
These communication interfaces include a dual asynchronous 
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receiver transmitter (DART) 34. The DART 34 camiunicates with 
the EUC 14 and the SEC 10 through lines 36 connected between the 
EUC 14 and the SPP 12 and through lines 38 connected between the 
SEC 10 and the SPP 12. The DART 34 is linked to the 
microprocessor 28. Input/output addresses ace decoded by. circuit 
40. A baud rate generator 41 is also included for appropriately 
matching the modems 16 (Fig. 1) and 18. 

The microprocessor 28 preferably includes its cwn 
working randan access memory (RAM) and it has the ability to 
execute a program out of either EEPROM. RAM 42 is provided as 
working storage for microprocessor 28. This RAM 42, as well as 
EEPROMS 22/ 26 are linked to the microprocessor 28. Memory 
addresses are decoded by circuit 44. 

Clock circuts 46 f 48 drive microprocessor 28 as well as 
the baud rate generator 41. A lOmSec delay circuit 50 is also 
connected to the microprocessor 28 which introduces a delay 
whenever a write operation is directed to EEPROM 22. 

In the preferred embodiment, the modem 18 is included 
in a "black box", with the SPP. This modem 18 takes data from the 
microprocessor 28 and transmits it over phone lines, and the 
modem 18 receives data transmitted over the phone line and passes 
it on to the microprocessor 28. While all of the above elements 
of the SPP 12 have been described as individual components, most, 
if not all, of these functions may be implemented on a single 
chip or small number of single chip microcomputers. 

Another aspect of the present invention which requires 
special consideration is the Package Encryption Key (PEK) which 
is created for each customer and his SPP by the SEC 10. This key 
will be rather large, preferably on the order of 256 bits. Seme 
or all of the bits of the PEK will be used to perform one or more 
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operations on a section of the code having a corresponding number 
of bits. 

For example, if a key of 256 bits is used, the SEC 10 
will select portions of the program to be encrypted which also 
have 256 bits. An operation, such as exclusive ORing (EOR) the 
two 256 bit codes, is then performed and the resulting 256 bits 
is inserted into the program at the position from which the 
selected 256 bits were removed. It is this encrypted version of 
the software package which is sent to a customer. In order to 
decrypt this code, the SPP 12 will perform a reverse operation 
using the 256 bit key and the encrypted 256 bits. In the case 
where the original operation was an EOR, the reverse operation is 
also an EOR. The specific key which is assigned to each customer 
will be stored in the SEC 10 and this key will be used by the SEC 
10 when creating each encrypted version of software. 

The valid software list which is maintained by the SPP 
12 in EEPROM 22 includes an RIN for each entry into the valid 
software table. This RIN points to a location in the PEK. For 
example, if a one byte RIN (0-255) in the valid software table 
for a specific software package is 108, then the program's 
encryption will be performed using a key which begins at the 
108th bit of the customer's PEK. In one embodiment, as each 
program is sent to the EUC 14, it will be given the next 
consecutive available RIN for the PEK. In other words, the first 
program in the valid program table will be given a one byte RIN 
of 1 into the PEK, the second program sent to the SPP's valid 
software list will be assigned an RIN of 2 for the PEK and so on. 
The assigned keys will remain the same size since the ends of the 
PEK are simply "wrapped around" so that the new end of the PEK is 
the bit immediately preceding the beginning bit of the PEK. 



To summarize, the actual encryption key is a function 
of the user-specific PEK and the software-specific RIN. The RIN, 



WO 85/02310 



PCT/US84/01856 



-16- 

in this embodiment, simply designates a starting location in the 
PEK„ Other means of combining RIN and PEK to obtain the 
software-specific encryption key are possible. 

Besides encrypting software with a unique PE^/RIN key, 
the software distribution system of the present invention will 
provide additional safeguards against copying. For example, 
since most programs are constructed from small, interrelated 
modules, portions of each module may be separately encrypted by 
the SEC 10. These modules may then be linked together by a 
linkage editor which basically keeps a list of the beginning and 
end addresses of all modules. When an end of a module is 
reached, a jump command to the beginning of the next appropriate 
module may then be put into effect. In this manner, ali the 
modules are tied together. In fact, once such .modules are 
linked in this fashion, the individual mcdules lose their 
identity and the program appears to be monolithic. Therefore, to 
further complicate any attempt to copy software, the software 
distribution system of the pcesent invention may scramble the 
order of the modules on a randcm or other basis. In this way, 
any person gaining access to two copies of the same encrypted 
software package sold by the SEC 10 will not be able to locate 
the sites of encryption by simple comparison. 

A concrete example of program encryption and module 
randcmizatioft is presented in Part II of the microfiche appendix. 
Five sample modules are incorporated in a program called "MAINl". 
The program is designed to run on a MSDOS system such as that 
used on the IBM PC. The unencrypted object code for the program 
is stated in hexadecimal digits on pages 1-13 of Part II of the 
microfiche appendix. To prepare this software for delivery, a 
special "security control module" (pages 17-19) is added to 
handle all calls to the SPP. The security control module acts 
like a subroutine. Actually, this subroutine engages the 
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" subprogram" in the SPP to decrypt the encrypted passages. To 
illustrate an encrypted passage, special print data (a part of 
the software) is presented in connection with modules 1 and 4. 
As shown on page 16 of Part II, two sets of "external character" 
data are created namely "*messgl" and ."*messg4" in place of the 
plain text version "This is. " module 1 or 4, respectively. (See 
page 16, Part II.)' Before encryption, the print data resides 
correctly in program memory beginning at hex location 2762 (page 
12 / Part II). After encryption, the first eight bytes of the 
print data for nodules 1 and 4 is encrypted as shewn for module 1 
in locations 2762-2769 (page 31, Part II). The encryption was 
performed by exclusive ORing. The original eight bytes * 
(representing "This is " with the 64 bit (eight bytes) PEK 
"AAAAAAAAAAAAAAAA". In binary this nonrandem PEK is "1010 ... " 
Thus the even/oddness of the RIN determines whether the 
decryption key starts with "0" or "1". The encrypted code on 
page 31. was produced using an even RIN of 1234 and the encrypted 
code for the scrambled module format was produced using an odd 
RIN of 4321. When using either encrypted program "MAIN1E" or 
MAIN2E", when running the user's copy, the security module is 
called upon reaching "*messgl" or "*messg2" and the encrypted 
bits are sent out to the SPP and exclusive OR'd with the key 
(i.e., either "101 ... "or "0101 ..." depending on the RIN in 
use), and returned to the user's computer in decrypted form as 
the equivalent of "This is ". Note that while a 
location-by-location comparison of "MAINl " (unencrypted) and 
"MAIN1E" could reveal the encrypted locations, this type of 
comparison is rendered more difficult by scrambling the order of 
the modules as in "MAIN2E". In practice, it is intended that a 
longer randan number PEK will be used and executable instructions 
as well as program data will be encrypted in a similar manner. 



The foregoing system thus solves the problem of secure 
distribution of software to users by associating each unique copy 
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with specific hardware to which the end user's computer must be 
connected. Copies of the user's program copy will only operate 
when the SPP with the right PEK and RIN is attached. When used 
in a phone line network, the system provides a powerful means of 
providing on-going service to users. For example, the user can 
•be notified of and provided with software enhancements via the 
network as soon as they are available. Moreover, the SPP 
provides for time-limited authorization. At the end of a trial 
period or rental term, the RIN for the borrowed software is 
cancelled, thus disabling further use. 

Among the various other possible configurations of the 
present system are local area networks. Modem communication is 
not the essential embodiment of the invention, only the preferred 
one. The invention also lends itself to use as a terminal 
verifier. Instead of using a password, the SPP can be used to 
decrypt a code from a host computer and retransmit a decoded 
password to the host to verify authorization for access to secure 
data, for example. 

Employing EEPROM's in the SPP opens up the possibility 
of downloading completely new software for running the SPP. Even 
new PEK's can be added by "remote control" from the SEC. Thus, 
the SEC maintains control over the cryptographic system in use by 
the SPP. For example, in addition to the exclusive OR algorithm, 
new algorithms with entirely different, perhaps more complex 
logic functions, could be added, including nonreversible keys. 

While the software distribution system of the present 
invention has been described with reference to its preferred 
embodiments, various modifications and alterations in both 
hardware and software will occur to those skilled in the art from 
the foregoing detailed description and the accompanying drawings. 
These and other modifications and variations are intended to fall 
within the scope of the appended claims and equivalents thereto. 
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PART I 



;o(Uil £PP coda 



• 


*pop 

. pa be 

. phil 


nAMSZ 
CCPTvOM 


equ I 000 ti 
equ fl 0 0 h 
equ COOh 


CTCO 

CTC 2 
CTC3 


• qu 

equ 
equ 
equ 


1 Qh 
I ih 
I2h 
i3h 


3I0DA 

srncA 

3100B 
SIOCQ 


equ 
equ 
equ 
equ 


OOh 
Oth 
02h 
03h 


r. IROA 
CIR8D 


equ 
equ 


RArU40Oh 
RAM*50Oh 


KODCSC 
E3CCNT 
CUDCHT 


equ 
• qu 

equ 


i — • 
3 

10000 



; ci rcuUc buffer for a 
; circular buffer for b 



to b direction 
to a direction 



; mod em mode escape char 

; number of modem chars needed 

; guard band count (about 1.3 seconds) 



I p n t a : 
opn ta : 
ipntb : 
opn tb : 

q rd tmr : 
g rd f I <j : 
count: 

curkty : 

cry pb C : 



key: 
sf 1 1 s t : 



start 



main: 



d sp I c h : 



rtsptcl 



org MAM 
.blkb 2 
.blkb 2 
.blkb 2 
.blkb 2 

.blkb 2 
.blkb 1 
.blkb 1 

.blkb 1 
.blkb 0 

offl SEPftOM 
.blkb 0 
.blkb ?«8 

orq 0 0 0 Oh 

Ixi sp , RAM+RAM3Z 
call init 
ixi h.CIRBA 
s h 1 d ipnta 
sh I d opn t a 
lai h.CiriOB 
shld ipntb 
sh I d opn t b 

call ge t a 
rao v c t a 
Ui h,cmdtbl 
cali dsptch 
i mp ma t n 

mv i a , - I 
cmp m 
r i 

mov a , c 
cmp m 
jt d sp t c i 
inx h 
inx h 
inx h 

jrap dsptch 
inx h 
mov a * m 
inx h 
mo v h , ra 



;input circular buffer pointer for a to b direction 
; out put circular buffer pointer for a to b direction 
jinput circular buffer pointer for b to a direction 
;output circular buffer pointer, for b to a direction 

; guard band timer 

;set to -i if last char was guard band 
;number of escape chars 

;key in current use for now, just use 1 byte 

;buf Car for encrypt operation 



;0 byte key 
; so f twa re list 



0 entries of 7 bytes 



;set up etc and pio 
init circular buffer pointers 



;get char on channel a 
; to c 

;dispatch table 

;call appropriate routine 



;end of tabid, ignore 



; ma t c h 



;get address* and jump there 
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cmd tbl : 



db Q 



end tbl : 



dw rttrt 

db I 

dw tneryp t 

db 2 

dw ge 1 1 ime 

db 3 

dw selfcey 

db 4 

dw update 

db S 

dw set time 

db 6 

dw rd 1 1 s t 
db 7 

dw modem 
db -1 

db '0' 
dw retst 
db * I * 
dw •ncrypt 
db '2' 
dw get time 
db '3.' 
dw selkey 
db '4' 
dw update 
db 

dw settime 

db '6» 
dw rdlist 
db '7' 
dw modem 
db -1 



; rtturn statu* 

; n turn tncrypttd rtsponsi 

; ca turn time ind data 

; sa I ec t key 

jupdate softwiri list 

;set time and date 

; return software list 

; go to modem mode 

i 

; return status 

; return encrypted response 

; return time and date 

;select key 

;update software list 

;set time and date 

;return software list 

;go to modem mode 



rets t . 



mv I a , ■ 3 ■ 
call puta 
ret 



mc ryp t 



encr t : 



enc r 2 : 



mv i c , B 

Ixi rwcrypbf 

Ida currty 

mo v b , a 

call ge t a 

r r a b 

motf m,a 

i ns h 

dcr c 

jm encrl 

mv i c , 0 

I v i h , c r ypb f 

mo v a , m 

call put a 

mx h 

dcr c 

jni ancr2 

re t 



; return status 
; return status 



for now 



return encrypted response 



;get C bytes to encrypt 
;encrypt it 



;send back encrypted bytes 



sellcey: ; s e 1 e c t key 

call geta .get index into software list 



mo v b , & 
call 9* t a 
mo v a . b 
ana a 
j ni a e 1 k 1 
Ida k«y 
sta curkey 
ret 

selki call gtlist 
mo v c , a 



, in.<l most significant p*rt i don't use it for now) 

.index of 0 means use deciult key 

.return pointer to bntcy in softwar* list 
; i nd e a into key 
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mv i 

1 K ( 

dad 
mo v 
sta 
c * t 



b,0 
\\ , key 
b 

a , m 

curk*y 



; t fc ft y 



g I list: 



gt 1st I : 

update: 

up da t 1 : 
upd4 t 2 : 

wc tprm; 

wr tpr 1 : 
wr t p r2 : 

rdl 1st : 
rdlstl : 



sanl.c w.th rnd.. into uoflware list 'only 1-0 legal) in r.g * 
iteturn pointer to software Mil 



lKi 
dcr 
r x 
an i 
1 * i 
dad 
dcr 
jnx 
rat 



h.sftlst ;b. ginning of software list 



d . 7 



gtlsti 



call ga t a 
call gtlist 
mvi c,7 
call ga t a 

call wr t p ra 

Inx n 

dcr c 

jnx updall 

ret 

;wclt 

push b 
mv i m. 0 £ f h 
mv i c , 0 
dcr c 

jnx wrtprl 
mov m,a 
dcr c 
inx wrtpr2 
p6p b 
rat 



,64 
. key 



mv i c i 
Ixi h, 
mo v 4 fc _ 
call puta 
inx h 
dcr c 

jnx rdlstl 
ret 



.only 0 possible entries 

littS b^tnnlVSf'i^ropct.t-. entry 



; upda te soi twa re list 

;get Index into list 

;3et beginning of that jntry 

!now get 7 software list entries 

;fiil in entry 

;write rag a to eeprora address In hi 



a rag a 



to eeprora address in hi 



;not yet implemented 
g e t 1 1 rae : 
se 1 1 ime : 



; riturn time and date 
; se t tine and date 



modem : 



modeml : 



ret 



sub a 

sta grdt Ig 
sU count 



modem2: Ixl h.CnDCNT 
shld grdtmr 



in SIOCA 
ani 4 
cnx snda 
in 3I0C3 
ani 4 
cnx sndb 
In SIOCA 
ani I 



linit guard band detect variables 

llnit guard band count 

;channei A status 
; ready to send on a 

; ready to send on b 
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modem3 : 



modemS : 



jt mod em3 

call rcvi 
cpi KOOCSC 
i nz modem 
Ida g r d £ I g 
cpl -1 
Jni modem 
liti h, count 
i nr m 

imp modern! 

in sioca 
ini x 
ens revb 

Ihld grdtmr 
dcx h 

shld grdtmr 
mo v iih 
on 1 

jnx modeml 

mvi a , - I 
sti grdflg 
Ida. count 
cpi E3CCNT 
rs 

jmp QOddAl 



; fiscapi to command mode char? 
; no — restt 

;guard band pr«c*d* this? 
;no — reset 

;yes, advance escapa count 
llnit guard band count again 



; ready to receive on b 
;decrement guard band timar 



;now have a guard band 

.right escape count? ^ Am 
;y*3. raturn to command mode 
, no , continue 



snda : 



sndb : 



revb : 



nand on a if char ready in b input buffer 
;no chars ready 

,updata circular buffer pointer 
;siind on b if char ready in a Input buffet 
; no chars ready 



Ihld opntb 
Ida ipntb 
emu 1 
c x 

mo v a , m 
out SIODA 
i ni I 

ahl'l opntb 
ret 

ihld opnta 
Ida i pn t a 
cmp I 
r z 

mov a.m 
out SIOOB 
inr I 

shld opnta 
ret 

^receive char on channel & 
Ihld ipnU 
m SIODA 
mov m.a 

shld l i P nta ;update circular buffer pointer 

rat 

;recaive char on channel b 
Ihld ipntb 
In SIODD 
mov m,a 

sMd'ipntb ;u P data circular buffer point. r 

ret 



;updata ctcculir buffer pointer 



returns char in reg a 



pu ta : 
pu t at : 



push psw 
in SIOCX 
ani 4 
jt putai 
pop psw 
out SIODA 
let 



;send char In reg a on channel a 
;ehannel A status 
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get*: 



;gat char from chinntl a to rag a 

In 3IOCA 
An 1 I 
j x Qe t a 
In SIOOA 
ret 



int t 



;lnlt CTC and 310 



;lnit chinnal 0, indchinnil 
mvi ».0l000l01b 
out CTCO 



mvl a. 16 
out CTCO 
mvl a ,01 000101b 
out CTC1 
mvi a , \6 
out CTC1 



; coun ter mode , 
; t lmi cons t an t 
;counter mode. 
;timt constant 



to divide by 16 
load time constant next. 



load time constant nait, 



; i ni t SIO channe 1 s 

mvl 4 , I Oh . 

out SIOCA 

nv i a , 4 

out SIOCA 

mvl 4,01000100b 

out SIOCA 

mvl 4,3 

out SIOCA 

mvl a, 11000001b 

out 3 I OCA 

mvi *,3 

out srocA 

mvi 4,01101000b 
out SIOCA 

mvl * , 1 Oh 
out SI0C3 
mv 1 4,4 
out SIOCS 
mvi 4,01000100b 
• out 310CB 
mv i 4,3 
out 3I0C3 
mvi a, 11000001b 
out 3I0CD 
• mv i 4,5 
out 310CB 
mvi a, OH 01 00 0b 
out SIOCQ 

ret 

end 



A and 0 to asynch 



; i&x clock. 1 stop bl t 



sRs enable, 0 bits/char 



;Tk enable, 0 bits/char 



;l£x clock. 1 stop bi t 



; n» enable, ft bi ts/char 



;Tk enable, C bi ts/char 
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PART II 

EXAMPLE OF PROGRAM ENCRYPTION AND MODULE RANOOMT 7.ATION 



Property of SOFTNBT tm ( Tnc 



Fiqure \ The proqram "MAIN" unencrypted and in 
object code. Its P E K is 

AAAAAAAAAAAAAAAA in hexadecimal code. 



Fiqure 2 Five sample modules which are part of 
"MAIN". They are unencrypted and in 
object code. 

Figure 3 These five modules in source code (the 
U C U Language). 

Figure 4 "MAIN'S" security control module in 
object code. 

Figure 5 The security control module in source 
code ("8086 Assembly Language"). 

Figure 6 The program "MAIN" encrypted with its 
security module and sample modules in 
order 1*2,3,4 ,5,Securi ty coded in object 
code. The RIN used is 1234. 

Figure 7 The program "MAIN" encrypted with its 
security module and sample modules in 
order 1,3 r 5,Security,2 f 4 coded in object 
code. The RIN used is 4121. 
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Dump of MAIN1.EXB/H 



0: 
10: 
20: 
30: 
40: 
50: 
60: 
70: 
80: 
90: 
A0: 
D0 : 
C0: 
DO : 
B0 : 
F0: 
100: 
110: 
120: 
130: 
140: 
150: 
160: 
170: 
180: 
190: 
1A0: 
1B0: 
1C0: 
1D0 : 
1E0: 
1F0 : 
200 : 
210: 
220: 
230: 
240: 
250: 
260: 
270; 
280: 
290: 
2A0: 
2B0: 
2C0: 
200: 
2E0: 
2F0: 
300: 
310: 
320: 
330 : 



4D 5A B0 01 16 00 04 
00 01 DO 51 0E 00 00 
74 00 55 02 79 00 
00 00 00 oo 00 00 
00 00 00 00 00 00 
00 00 00 00 00 00 
00 00 00 00 
00 00 00 00 
00 00 00 00 
00 00 00 00 
00 00 00 00 
00 00 00 00 
00 00 00 00 
00 00 00 00 00 
00 00 00 00 00 
00 00 00 00 00 
00 00 00 00 oo 
00 00 00 00 oo 00 
00 00 00 00 00 



00 00 
00 00 
00 00 
00 00 
00 00 
00 00 
00 00 
00 
00 
00 
00 



00 00 00 
00 00 00 
00 00 00 
00 00 00 
00 00 00 
00 



00 
00 
00 



00 
00 00 
00 00 
00 00 
00 00 



00 
00 
02 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 00 
00 00 
00 00 
00 00 
00 00 
00 00 
00 00 
00 00 
00 00 
00 00 



55 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 



00 00 00 00 00 
00 00 00 00 00 00 00 



00 
00 
00 



00 00 
00 00 
00 00 
00 00 



00 00 00 00 00 
00 00 00 00 00 
00 00 00 00 00 
00 00 00 00 00 
00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 OO 00 
4C 61 74 74 6<> 61 6S 20 
55 02 8B D8 8E D0 26 RB 
F0 75 06 Bl 04 D3 El F.B 
IE 0E 00 B8 60 04 Al 30 
80 00 26 8A 0C 46 32 ED 
FF 2B E3 8B FC C6 05 63 
8A 04 88 05 46 47 K2 F7 
8B C4 50 E8 BD 00 8B E5 
E0 CB 55 8B EC E8 0E 00 
00 E8 3A 00 5D C3 55 8B 
5D C3. 55 8B * EC B8 
55 8B EC B8 38 00 
EC FF 36 5C00 Efl 
5E 00 50 E8 CD 02 
4C 00 3C EA 75 28 
3A 00 BA C4 E8 35 00 
83 C3 04 33 C9 8A 0F 
4C FC 8B FE B0 01 E8 
0A 00 E2 F9 59 E8 07 
7B C3 55 83 EC 0C 8B 



8B E5 
5D CI 
55 8B 
EC B8 
00 Efl 



E8 
37 
CO 
E8 
E4 



20 00 10 00 FF FF 9B 02 MZ.. 

ic 00 oo oo 10 00 00 00 l\\ Q l\Y : *u 

7E 00 55 02 00 00 00 00 t.U.y.U. .U 

00 00 00 00 oo 00 of 

00 00 00 00 00 00 00 00 

00 00 oo oo oo oo 00 00 

00 00 00 00 00 00 00 00 

00 00 00 00 00 0 0 00 00 

00 00 00 00 OO OO 00 00 

00 00 00 00 00 OO 00 00 

00 00 00 00 oo oo 00 00 

00 00 oo oo oo 00 00 00 

00 00 00 oo oo 00 00 00 

00 00 00 oh oo 00 00 00 

00 00 oo oo oo oo 00 00 

00 00 00 00 00 00 00 00 

00 00 00 oo 00 oo 00 00 

00 00 00 00 00 00 00 00 

00 oo oo oo 00 00 oo 00 

00 00 oo 00 oo 00 0 0 00 

00 00 00 00 00 OO 0 0 00 
00 00 00 00 00 00 00 00 

00 00 oo oo 00 00 00 00 

00 00 00 00 00 00 00 00 

00 00 00 00 00 00 00 00 

00 00 OO 00 00 00 00 00 

00 00 00 00 00 OO 00 00 

00 00 00 00 00 00 00 00 

W 00 00 0» 00 00 00 00 

00 00 00 00 0» OO 00 00 * 

00 00 00 00 00 00 00 00 

00 00 oo oo 00 00 00 00 r*i*02* # 

41 20 11 2E 10 12 FA Bfl Lattice C 

IK 02 00 2B D8 F7 C3 00 U 

03 HR F0 FF SB El PB 89 . u . . . : . . 

00 06 33 CO 50 8B EC BE .... • • • • • * •■• 

8B 09 R3 CI 04 81 E3 FE ..S..F2. 

47 E3 0DC6 05 20 47 26 . + - . . . - c G . . . . G & 

33 CO 88 05 8C D8 8F. CO ' * 3 

CB Al OE 00 20 04 00 80 . .P ••• 

R8 19 GO ER 24 00 B8 2F •'"Vri" "fiS 

EC FF 36 24 00 F.8 05 03 "p "* 

26 00 50 E8 F7 02 8B B? '° ' J'* - ",' 

50 E 8 E<* 02 8B E5 SD C3 ? '"\'o 

DB 02 flB E5 50 C3 55 SB U...6\.. •••■'• u ' 

8B E5 5D C3 B0 00 E8 4C .. • • 1 ' 

B 0 03 E8 40 00 B8 E4 EC ..L.<.u( 

BB 72 00 8B 16 70 00 C4 .:....'>. 1 ju 

43 F.8 06 00 4A 75 FO C3 7.. .3... C --- Ju " 

13 00 51 B9 08 00 26 AC * ? * * * ' 

00 AA E2 FA C3 E6 7B C3 m m " ^ 

EC 8B 76 10 8A 04 30 E4 .(.0 v...w- 



Figure 
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ia aB F8 8A 85 22 01 30 E4 25 08 00 74 05 FF 46 e....".f .%..t..F 

«! ll 11 H C7 11 8$ 00 00 00 83 3E 82 00 20 7C 03 J* 

365* E9 79 01 8B 76 10 8A 04 30 E4 E9 17 01 FF 46 10 fl " fl ;e 

370* C7 36 24 02 00 00 8B 76 10 8A 04 30 E4 40 8B F8 ••*--': tf '$ 

III- S 85 22 01 30 E4 25 04 00 75 03 E9 10 0 Al 24 .. .9.1. -U.....« 



390. 5 02 BB OA OS F7 EB FF 46 10 8A 1C 30 FF 81 B3 3F ...... .Y •.•»•••• 

Ill'- 00 03 C3 A3 24 02 EB CE FF 46 10 C7 46 04 00 00 ....9... * * f^I" 

380- ll 76 10 8A 04 30 E4 85 CO 89 46 00 74 29 40 8B "l'^*: 
"J*. ll ll 84 22 01 30 E4 25 08 00 75 IB 8B 46 04 3D 

3D0: 10 00 7D 0E FF 46 04 8B F0 8B 7E IB 8A 05 88 84 ..)..?.. 

3E0- 88 00 FF 46 10 EB C9 SB 76 04 C6 84 88 00 00 B9 J';:"" 

3F3* AC 00 8B 76 10 46 8A 04 30 E4 3D 3E 00 89 76 10 ...V.F.. «.->.. v. 

Ill'- 75 09 B8 EC 00 FF 46 10 A3 86 00 C7 46 04 00 00 Vo 'Y^T 

IS 8B 76 10 8A 04 30 E4 85 CO 89 46 00 74 29 40 8B -v.;.*- 

III: F0 8A 84 22 01 30 E4 25 08 00 7S IB 8B 46 04 3D ... .«.» 

439- 10 00 7D 0E FF 46 04 8B F0 8B 7E 10 8A 05 88 84 . . I ..V . . .. 

40 99 00 FF 46 10 EB C9 8B 76 04 C6 84 99 00 00 EB ...F.... — 

450: 40 Al 82 00 FF 06 82 00 Dl E0 SB F0 8B 46 10 89 M. ...... .... 

iEisHSasSBSSSssSSSs 

tiS 03 E9 14 FF 3D 3D 00 75 03 E9 Dl FE EB B3 8B 76 . . . .« .o .v 

4A0: 10 8A 04 30 E4 FF 46 10 C6 04 00 85 CO- 89 46 04 "•J--^ • ~ • • 

4B0 74 2A 8B 76 10 8A 04 30 E4 40 8B F8 8A 85 22 01 t*: v -;- fl ' 

4C0- 30 E4 25 08 00 74 05 FF 46 10 EB E6 8B 76 10 8A 0.%..t.. F....V. 

400- 04 30 E4 85 C0 74 03 E9 7F FE EB 00 B8 EE 00 50 .0...t.. ....... P 

4E0 B8 88 00 50 E8 CD 01 8B E5 FP 36 86 00 BB 99 00 ...P 

ill'* 5 89 46 06 F.8 BD 01 8B E5 BB EC 00 53 BB AA 00 S.F S 

500 53 89 46 08 E8 AD 01 8B E5 85 C0 89 46 0A 75 09 S.F..... .. ; .*.«. 

Iia B8 01 00 50 E8 65 03 8B E5 83 7B 06 00 75 15 FF •••P^V • •. "V 

i ll s a a s n S 3 s :\ S !:::: ! :: 
K: S S2 K 5 S S S S S S : K 

580- 8A 44 06 30 B4 00 04 00 88 44 06 B8 AC M 50 FF .0.8.... ;■>••••*• 

"!i 36 82 00 E8 EC FC 8B E5 33 CO SO F.8 A7 03 8B RS «.-••••• 3P 

Ha. a\ ri BC 5D C3 55 81 EC OE 01 8H KC 80 8fi 14 01 ...I.U.. 

4S Sc li ll 12 l\ 8A 04 30 E4 8S CO 75 03 «9 ........ .■»•«.. 

SCO: EC 00 8B DE 89 5E 00 43 8A 04 30 B4 TO 25 00 89 ..... .C ..0. 
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char *raessgl » "This is module l\n»; 
module I () 

* extern char *uu;sfl*il ; 

printf (messrjl); 

] 



moduLe2 () 

* printf ("This Is module 2\n w ) ; 

1 



moduie3 () 

* printf ("This is module 1\n'M ; 
} 

char *raessg4 » "This is module 4\n"; 
module4 () 

* extern char *messg4; 
printf (raessg4) ; 

) 

modules () 

1 printe ("This is module 5\n")j 

) 



Figure 3 



WO 85/02310 



PCT/US84/01856 

-41- 



Oump Of SBCUHITV.OnJ/H 



10: 
20: 
30: 
40: 
50: 
60 t 
70: 
80: 
90: 
A0: 
DO : 
C0: 
DO: 
E0: 
F0: 
100: 
110: 
120: 
130: 
140: 
150: 



80 03 00 
44 47 52 
4F 47 3C 
28 57 00 
00 04 FF 
06 4D 45 
00 06 53 
03 00 00 
08 00 35 
CC 0C 16 
00 C8 00 
£8 00 00 
37 83 C3 
CD 4C FC 
E8 00 00 
R4 7n C3 
10 02 02 
04 84 15 
ID 00 01 
36 00 B4 
84 4(1 1U 
43 55 52 



01 41 
4F 55 
98 07 
05 05 

02 5D 
53 53 
50 50 

00 dfl 
9C 10 

01 02 

00 3C 
8A C4 
04 33 
8B FE 
E2 F9 
CK 9C 
54 00 
10 02 

01 02 
3C 10 
.02 02 
49 54 



00 



30 96 1A 
50 06 50 

00 48 12 

01 D7 9A 
8C 22 
47 34 
4B 45 59 

0(1 01 00 
00 CC 02 
HF AO 511 
KA 75 28 
KG 00 00 
CO flA OF 
HH 01 BO 
59 1211 00 
51 0« 04 
U4 OF I0 
02 51 OO 
00 C4 21 
H'2 02 51 
54 0« F5 
SO 00 00 



00 00 
47 52 
00 02 
04 00 

06 41) 

07 40 
00 02 
00 00 
16 02 
00 02 
HO 03 

nn 00 

4 3 F.fl 
00 00 
00 AA 
03 10 
02 02 
84 1A 
14 01 
00 H4 
»0 OF 
00 DP 



04 44 
4F 55 
02 01 
0 3 Fb 1 
45 53 
4F 44 
A0 16 
00 08 
0 3 t!C 
00 00 
KU 00 
00 Wit 

00 0(H 
51 RO 
E2 FA 
02 02 
SL 00 
10 02 

01 84 
45 10 
00 04 
8A 02 



41 54 
50 04 
02 98 
01 5F 
<iT 47 
55 4C 
00 »1 
00 OO 

07 16 
110 0(3 
00 HB 
16 0« 
4 A 

08 00 
C3 K6 



51 
C4 



00 
12 



02 51 
2E 1» 
02 02 
02 08 
00 00 



41 06 
50 52 
07 00 
9A 04 
31 00 
45 32 
00 00 

00 00 

01 01 
K8 00 
00 00 
00 C4 
FO C3 
26 AC 
7n C3 
84 06 
06 01 
00 C4 
02 02 
SI 00 
53 45 
74 



....a; DATA 

OCIROUP.P CROUP • PR 

0G<. . .H 

(W 

. .1 -MKSSG1 . 
!j4ESSG4. .M0DULE2 
. .55PPKEY 

...*.[ •••••••• 

.<.u< 

7 1 ! .3 . . . C. • ,JU. . 

. u Q..-{; 

. . # T Q 

Q 0.. 

I 

6, .<. . .0 • -K- • -Q* 

.K...T 

CUR1TY t 



Figure 4 



WO 85/02310 



PCT/US84/01856 



pgroup group 
pcog segment 
assume 
public 
dgroup group 
data segment 
assume 
extrn 
extrn 
extrn 
extrn 
sectab dw 
dd 
db 
dd 
db 
dd 
db 

secend db 
data ends 
security 

mov 

call 

call 

ctnp 

jnz 

mov 

call 

mov 

call 

mov 

call 

mov- 

mov 

lopl: les 
add 
xor 
mov 
inc 
call 
dec 
jnz 
ret 

fail: int 

security 

encode proc 
eld 
mov 
mov 
call 
push 
mov 

lop2: lods 



prog 

byte public 'prog' 

cs:pgroup 

secur i ty 

data 

word public 'data' 
dsrdgroup 
module2:byte 
messgltbyte 
raessg4:byte 
sppkey :word 
(secend-sectab-2) /5 
pgrouptmodul e2 
01 

dgrouptmessgl 
08 

dgroup:messg4 

G8 

? 

proc near 

al,0 

outspp 

inspp 

al,0cah 

fail 

al,1 

outspp 

ax, offset sppkey 

outspp 

a I, ah 

outspp 

bx , offset sectah+2 
dx , sectab 
si,dword ptr fbxl 
bx,4 
cx ,cx 

cl,byte ptr [bxl 
bx 

encode 

dx 

lopl 

4ch 

endp 

near 

di,si 
al,l 
outspp 
cx 

cx t 8 

byte ptr es: f si 1 



WO 85/02310 



PCT/US84/01856 



-43- 
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What is claimed is: 

1. A method of distributing software via an electronic 
communications network frcm a central facility with storage 
capacity for a library of available programs to a plurality of 
users' canputers such that each distributed copy is usable only 
on specific user hardware, cctnprising the steps of 

responding to a specific user request for a specific 
software program by generating a unique index code and preparing 
a unique user copy by encrypting selected passages of said 
program in a manner such that a given algorithm operating on said 
encrypted passage and a key specified by said index code will 
yield the plaintext version of said passage , 

electronically transmitting said index code and said 
program with encrypted passages to the user, 

registering -the index code in an independent auxiliary 
device interconnected with the user's computer, 

storing the transmitted program with encrypted passages 
in the user's -computer system on user selected media, 

when running the program with the encrypted passages on 
the user's computer, suspending normal execution at each 
encrypted passage and decrypting the encrypted passage by means 
of the auxiliary device by algorithmically combining the key 
specified by said index code with the encrypted passage and 
returning plaintext, to said user's computer, and 

continuing normal execution until encountering another 
encrypted passage, 

whereby each user gets a different copy of the same 
program but no user ever has a complete plaintext version 
residing at any given time in the user's system memory so that 
each program copy is wedded to a specific user's auxiliary 
device. 

2. The method of claim 1, further comprising the step 

of 
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issuing differentiated independent auxiliary devices to 
said users having unique decryption master codes recorded at the 

central facility, 

before preparing software for delivery, identifying the 
user's independent auxiliary device and looking up its decryption 
master code, 

then preparing the unique copy by encrypting passages 
of the user selected program in a manner such that a given 
algorithm operating on (1) a key produced by a combination of the 
index code and the user"s master code and (2) the encrypted 
passage will yield a plaintext version of the passage. 

3. The method of claim 1, further comprising 
automatically removing the index code from the. independent 
auxiliary device upon the occurrence of a predetermined 
condition, 

whereby the user's copy of the program is automatically 
disabled, for example, after a predetermined time interval. 

4. The method of claim 2, wherein said issuing step 
includes factory loading each independent auxiliary device with a 
different decryption master code and recording each such master 
code at the central facility. 

5. The method of claim 2, wherein the issuing step 
includes selecting the decryption master codes at the central 
facility after distribution of the independent auxiliary devices 
to the users and electronically transmitting a unique master code 
to each of the independent auxiliary devices upon its initial 
request for software. 

6. The method of claim 5, wherein the step of 
electronically transmitting the decryption master code includes 
transmitting an encrypted version of the master code and 
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decrypting the raster code before storing it in the independent 
auxiliary device. 

7. The method of claim 1, wherein at least sane of the 
encrypted passages of the program are software instructions 
themselves. 

8. The method of claim l f further comprising the step 
of scrambling the order of the modules in the user's copy before 
transmission to frustrate comparison with the original version of 
the program. 

9. A software protection processor for an end user 
computer comprising 

means for storing a unique package encryption key 

(PEK), 

means for receiving and storing a- registration index 
number (RIN) uniquely associated with a specific software program 
to be stored in the end user's computer system, 

logic means for modifying the PEK with the RIN to 
produce a specific decryption key, 

ccmputer means responsive to the presentation of 
encrypted data by the user's computer for decrypting said data by 
algorithmically ccmbining it with the specific decryption key to 
produce a decrypted data output to said user's computer during 
program execution by the user's computer, 

whereby a unique copy of software chosen by the user 
can be prepared by a central facility by encrypting selected 
passages of the software in a manner such that they can be 
decrypted by the software protection processor by algorithmically 
combining them with a decryption key produced by modifying the 
PEK with the RIN so that the user's copy will not run properly 
unless his computer is connected to a software protection 
processor with a correct PEK and RIN. 
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10. The apparatus of claim 9, further comprising 
means for disabling the software specific RIN upon the 

occurrence of a predetermined condition, 

whereby the selected software is disabled after, for 
example, a predetermined trial period or rental term, 

11. A data security apparatus for a user's computer 
having a ccmmunications link with a central computing facility, 
ccrrprising 

an independent auxiliary device electronically separate 
from but connected to the user's computer including 
means for storing a unique first code, 
means for receiving via said coranunications link a 
second unique code, 

means for nodifying said first code with said 

second code to produce a third code, 

means responsive to the presentation of encrypted 
data for decrypting said data by algorithmically combining it 
with said third code, 

whereby data presented over the cotrenunications link as 
an encrypted password, for example, or by the user's computer can 
be decrypted for verification. 

12. The apparatus of claim 11, further comprising 
means for disabling said second code after a 

predetermined usage interval. 

13. A software distribution system for distributing 
software frcm a central facility to a plurality of users' 
computers such that each distributed copy is usable only with a 
specific user's auxiliary device, comprising the steps of 

generating a unique index code, 

preparing a unique user copy of a selected software 
program by encrypting selected passages of said program in a 
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manner such that a given algorithm operating on said encrypted 
passage and a key specified by said index code will yield the 
plain text version of said passage, 

providing an auxiliary device in which said index code 
can be registered, designed to be interconnected with the user's 
canputer, such that when running the program with the encrypted 
passages, normal execution is suspended at each encrypted passage 
and the encrypted passage is decrypted by the auxiliary device by 
algorithmically combining the key specified by said index code 
with the encrypted passage and returning plain text to said 
user's computer such that there is never a complete plain text 
version of the software program resident in the user's system 
memory, 

whereby each user receives a different copy of the same 
software program which will only run with his specific auxiliary 
device. 

14, The method of claim 13, wherein said step of 
providing auxiliary devices includes issuing differentiated 
auxiliary devices to said users having unique decryption master 
codes recorded at the central facility, 

before preparing software for delivery, identifying the 
user's auxiliary device and looking up its decryption master 
code, 

then preparing the unique cqpy by encrypting the 
passages of a selected program in a manner such that a given 
algorithm operating on (1) a key produced by a combination of the 
index code and the user's master code and (2) the encrypted 
passage will yield a plain text version of the passage. 

15. The method of claim 13, further conprising 
automatically disabling the index code in the auxiliary device 
upon the occurrence of a predetermined condition, 

whereby the user's copy of the program is au tenet ically 
disabled, for example, after a predetermined time interval. 
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16. The method of claim 13, wherein at least sate of 
the encrypted passages of the program are software instructions 
themselves. 



17. The nethod of claim 13, further comprising the 
step of scrambling the order of the modules in the user's copy 
frustrate comparison with another version of the program. 
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